Every CVE Search/ Get API key

CVE-2025-61102

FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via...

7.5 HighFix available

FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_ext_link_adj_sid function at ospf_ext.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted OSPF packet.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.50%Up 0.5 points since Oct 28, 2025
90%50%10%1%

What each source reports

CVE List Score used 7.5

FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_ext_link_adj_sid function at ospf_ext.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted OSPF packet.

Record
CVE-2025-61102
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-476
Updated
2026-11-02
EUVDEUVD-2025-36348 7.5

FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_ext_link_adj_sid function at ospf_ext.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted OSPF packet.

Record
EUVD-2025-36348
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-63qm-crxg-f8px 7.5

FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via...

FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_ext_link_adj_sid function at ospf_ext.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted OSPF packet.

Record
GHSA-63qm-crxg-f8px
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-476
Updated
2026-11-02
NVD 7.5

FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_ext_link_adj_sid function at ospf_ext.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted OSPF packet.

Record
CVE-2025-61102
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-476
Updated
2026-11-05
OSV 7.5

FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_ext_link_adj_sid function at ospf_ext.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted OSPF packet.

Record
CVE-2025-61102
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2025-61102 7.5

FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_ext_link_adj_sid function at ospf_ext.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted OSPF packet.

Record
DEBIAN-CVE-2025-61102
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 10 moreShow less
OSVUBUNTU-CVE-2025-61102 7.5

FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_ext_link_adj_sid function at ospf_ext.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted OSPF packet.

Record
UBUNTU-CVE-2025-61102
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-05
OSVAZL-69449 No score

CVE-2025-61102 affecting package frr for versions less than 8.5.5-5

FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_ext_link_adj_sid function at ospf_ext.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted OSPF packet.

Record
AZL-69449
Updated
2026-11-02
OSVAZL-69452 No score

CVE-2025-61102 affecting package frr for versions less than 9.1.1-5

FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_ext_link_adj_sid function at ospf_ext.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted OSPF packet.

Record
AZL-69452
Updated
2026-11-05
OSVopenSUSE-SU-2026:20682-1 No score

Security update for frr

This update for frr fixes the following issues:

Security issues:

  • CVE-2025-61099: NULL Pointer Dereference in FRRouting (bsc#1252838).
  • CVE-2025-61100: NULL Pointer Dereference in FRRouting (bsc#1252829).
  • CVE-2025-61101: NULL Pointer Dereference in FRRouting (bsc#1252833).
  • CVE-2025-61102: NULL Pointer Dereference in FRRouting (bsc#1252835).
  • CVE-2025-61103: NULL pointer dereference in show_vty_ext_link_lan_adj_sid() in ospf_ext.c (bsc#1252810).
  • CVE-2025-61104: NULL pointer dereference in show_vty_unknown_tlv() in ospf_ext.c (bsc#1252811).
  • CVE-2025-61105: FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_link_info function at ospf_ext.c (bsc#1252761).
  • CVE-2025-61106: NULL pointer dereference in show_vty_ext_pref_pref_sid() in ospf_ext.c (bsc#1252812).
  • CVE-2025-61107: NULL pointer dereference in show_vty_ext_pref_pref_sid() in ospf_ext.c (bsc#1252813).
  • CVE-2026-5107: A vulnerability has been found in FRRouting FRR up to 10.5.1. This affects the function process_type2_route of the file bgpd/bgp_evpn.c of the component EVPN Type-2 Route Handler. The manipulation leads to improper a (bsc#1261013).
Record
openSUSE-SU-2026:20682-1
Updated
2026-11-02
OSVSUSE-SU-2026:0665-1 No score

Security update for frr

This update for frr fixes the following issues:

  • CVE-2025-61099: Fixed a NULL pointer dereference, which may lead to a DoS vulnerability. (bsc#1252838)
  • CVE-2025-61100: Fixed a NULL pointer dereference, which may lead to a DoS vulnerability. (bsc#1252829)
  • CVE-2025-61101: Fixed a NULL pointer dereference, which may lead to a DoS vulnerability. (bsc#1252833)
  • CVE-2025-61102: Fixed a NULL pointer dereference, which may lead to a DoS vulnerability. (bsc#1252835)
  • CVE-2025-61103: Fixed a NULL pointer dereference, which may lead to a DoS vulnerability. (bsc#1252810)
  • CVE-2025-61104: Fixed a NULL pointer dereference, which may lead to a DoS vulnerability. (bsc#1252811)
  • CVE-2025-61105: Fixed a NULL pointer dereference, which may lead to a DoS vulnerability. (bsc#1252761)
  • CVE-2025-61106: Fixed a NULL pointer dereference, which may lead to a DoS vulnerability. (bsc#1252812)
  • CVE-2025-61107: Fixed a NULL pointer dereference, which may lead to a DoS vulnerability. (bsc#1252813)
Record
SUSE-SU-2026:0665-1
Updated
2026-11-02
OSVSUSE-SU-2026:1057-1 No score

Security update for frr

This update for frr fixes the following issues:

  • CVE-2025-61099: NULL Pointer Dereference in FRRouting (bsc#1252838).
  • CVE-2025-61100: NULL Pointer Dereference in FRRouting (bsc#1252829).
  • CVE-2025-61101: NULL Pointer Dereference in FRRouting (bsc#1252833).
  • CVE-2025-61102: NULL Pointer Dereference in FRRouting (bsc#1252835).
  • CVE-2025-61103: NULL pointer dereference in show_vty_ext_link_lan_adj_sid() in ospf_ext.c (bsc#1252810).
  • CVE-2025-61104: NULL pointer dereference in show_vty_unknown_tlv() in ospf_ext.c (bsc#1252811).
  • CVE-2025-61105: NULL pointer dereference in show_vty_link_info() in ospf_ext.c (bsc#1252761).
  • CVE-2025-61106: NULL pointer dereference in show_vty_ext_pref_pref_sid() in ospf_ext.c (bsc#1252812).
  • CVE-2025-61107: NULL pointer dereference in show_vty_ext_pref_pref_sid() in ospf_ext.c (bsc#1252813).
Record
SUSE-SU-2026:1057-1
Updated
2026-11-02
OSVSUSE-SU-2026:1063-1 No score

Security update for frr

This update for frr fixes the following issues:

Security issues:

  • CVE-2025-61099: NULL Pointer Dereference in FRRouting (bsc#1252838).
  • CVE-2025-61100: NULL Pointer Dereference in FRRouting (bsc#1252829).
  • CVE-2025-61101: NULL Pointer Dereference in FRRouting (bsc#1252833).
  • CVE-2025-61102: NULL Pointer Dereference in FRRouting (bsc#1252835).
  • CVE-2025-61103: NULL pointer dereference in show_vty_ext_link_lan_adj_sid() in ospf_ext.c (bsc#1252810).
  • CVE-2025-61104: NULL pointer dereference in show_vty_unknown_tlv() in ospf_ext.c (bsc#1252811).
  • CVE-2025-61105: NULL pointer dereference in show_vty_link_info() in ospf_ext.c (bsc#1252761).
  • CVE-2025-61106: NULL pointer dereference in show_vty_ext_pref_pref_sid() in ospf_ext.c (bsc#1252812).

Non-security issues:

  • Fix /var/run leftovers in logrotate config file, create /var/log and /var/lib via tmpfiles.d (jsc#PED-14796).
Record
SUSE-SU-2026:1063-1
Updated
2026-11-02
OSVSUSE-SU-2026:2121-1 No score

Security update for frr

This update for frr fixes the following issues:

  • CVE-2025-61099: NULL Pointer Dereference in FRRouting (bsc#1252838).
  • CVE-2025-61100: NULL Pointer Dereference in FRRouting (bsc#1252829).
  • CVE-2025-61101: NULL Pointer Dereference in FRRouting (bsc#1252833).
  • CVE-2025-61102: NULL Pointer Dereference in FRRouting (bsc#1252835).
  • CVE-2025-61103: NULL pointer dereference in show_vty_ext_link_lan_adj_sid() in ospf_ext.c (bsc#1252810).
  • CVE-2025-61104: NULL pointer dereference in show_vty_unknown_tlv() in ospf_ext.c (bsc#1252811).
  • CVE-2025-61105: NULL pointer dereference in show_vty_link_info() in ospf_ext.c (bsc#1252761).
  • CVE-2025-61106: NULL pointer dereference in show_vty_ext_pref_pref_sid() in ospf_ext.c (bsc#1252812).
  • CVE-2025-61107: NULL pointer dereference in show_vty_ext_pref_pref_sid() in ospf_ext.c (bsc#1252813).
  • CVE-2026-5107: Improper access controls via bgpd EVPN and ENCAP/VNC packet parsing (bsc#1261013).
Record
SUSE-SU-2026:2121-1
Updated
2026-11-02
OSVSUSE-SU-2026:21550-1 No score

Security update for frr

This update for frr fixes the following issues:

Security issues:

  • CVE-2025-61099: NULL Pointer Dereference in FRRouting (bsc#1252838).
  • CVE-2025-61100: NULL Pointer Dereference in FRRouting (bsc#1252829).
  • CVE-2025-61101: NULL Pointer Dereference in FRRouting (bsc#1252833).
  • CVE-2025-61102: NULL Pointer Dereference in FRRouting (bsc#1252835).
  • CVE-2025-61103: NULL pointer dereference in show_vty_ext_link_lan_adj_sid() in ospf_ext.c (bsc#1252810).
  • CVE-2025-61104: NULL pointer dereference in show_vty_unknown_tlv() in ospf_ext.c (bsc#1252811).
  • CVE-2025-61105: FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_link_info function at ospf_ext.c (bsc#1252761).
  • CVE-2025-61106: NULL pointer dereference in show_vty_ext_pref_pref_sid() in ospf_ext.c (bsc#1252812).
  • CVE-2025-61107: NULL pointer dereference in show_vty_ext_pref_pref_sid() in ospf_ext.c (bsc#1252813).
  • CVE-2026-5107: A vulnerability has been found in FRRouting FRR up to 10.5.1. This affects the function process_type2_route of the file bgpd/bgp_evpn.c of the component EVPN Type-2 Route Handler. The manipulation leads to improper a (bsc#1261013).
Record
SUSE-SU-2026:21550-1
Updated
2026-11-02
OSVUSN-8046-1 No score

frr vulnerabilities

It was discovered that FRR incorrectly handled certain malformed OSPF and update packets. A remote attacker could possibly use these issues to cause FRR to crash, resulting in a denial of service.

Record
USN-8046-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
frr
Azure Linux:2
 before 8.5.5-5
8.5.5-5
frr
Azure Linux:3
 before 9.1.1-5
9.1.1-5
frr
Debian:12
 before 8.4.4-1.1~deb12u2, plus listed versions
8.4.2-18.4.4-18.4.4-1.1~deb12u1
8.4.4-1.1~deb12u2
frr
Debian:13
 before 10.3-3+deb13u1, plus listed versions
10.3-3
10.3-3+deb13u1
frr
Debian:14
 before 10.5.1-3, plus listed versions
10.3-310.3-410.3-510.3.1-110.3.1-2
Show 10 moreShow less
10.3.1-310.3.1-410.4.0-110.4.1-110.4.1-210.4.1-310.5.0-110.5.0-210.5.1-110.5.1-2
10.5.1-3
frr
SUSE:Linux Enterprise Module for Server Applications 15 SP7
From an advisory covering 9 CVEs
 before 10.2.1-150700.3.5.1
10.2.1-150700.3.5.1
frr
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 9 CVEs
 before 8.5.6-8.9.1
8.5.6-8.9.1
frr
SUSE:Linux Enterprise Module for Server Applications 15 SP7
From an advisory covering 9 CVEs
 before 8.5.6-150500.4.36.1
8.5.6-150500.4.36.1
frr
openSUSE:Leap 15.6
From an advisory covering 9 CVEs
 before 8.5.6-150500.4.36.1
8.5.6-150500.4.36.1
quagga
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
0.99.24.1-20.99.24.1-2ubuntu10.99.24.1-2ubuntu1.10.99.24.1-2ubuntu1.20.99.24.1-2ubuntu1.30.99.24.1-2ubuntu1.40.99.24.1-2ubuntu1.4+esm1
 None known
Show 10 moreShow less
Affected packages
PackageAffectedFixed
quagga
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
1.1.1-31.1.1-3ubuntu11.2.2-11.2.2-1ubuntu11.2.4-11.2.4-1ubuntu0.1~esm11.2.4-1ubuntu0.1~esm2
 None known
quagga
Ubuntu:20.04:LTS
 All versions, plus listed versions
1.2.4-4build11.2.4-4ubuntu0.11.2.4-4ubuntu0.41.2.4-4ubuntu0.5
 None known
frr
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
6.0.2-2build27.2-1ubuntu17.2-1ubuntu27.2.1-17.2.1-1ubuntu0.1
Show 6 moreShow less
7.2.1-1ubuntu0.27.2.1-1ubuntu0.2+esm17.2.1-1ubuntu0.2+esm27.2.1-1ubuntu0.2+esm37.2.1-1ubuntu0.2+esm47.2.1-1ubuntu0.2+esm5
 None known
frr
Ubuntu:22.04:LTS
 before 8.1-1ubuntu1.14, plus listed versions
7.5.1-1.18.1-18.1-1ubuntu18.1-1ubuntu1.18.1-1ubuntu1.2
Show 10 moreShow less
8.1-1ubuntu1.38.1-1ubuntu1.48.1-1ubuntu1.58.1-1ubuntu1.68.1-1ubuntu1.78.1-1ubuntu1.88.1-1ubuntu1.98.1-1ubuntu1.108.1-1ubuntu1.118.1-1ubuntu1.13
8.1-1ubuntu1.14
frr
Ubuntu:24.04:LTS
 before 8.4.4-1.1ubuntu6.5, plus listed versions
8.4.4-1.1ubuntu18.4.4-1.1ubuntu38.4.4-1.1ubuntu48.4.4-1.1ubuntu58.4.4-1.1ubuntu6
Show 4 moreShow less
8.4.4-1.1ubuntu6.18.4.4-1.1ubuntu6.28.4.4-1.1ubuntu6.38.4.4-1.1ubuntu6.4
8.4.4-1.1ubuntu6.5
frr
Ubuntu:25.10
 before 10.4.1-3ubuntu1.1, plus listed versions
10.2.1-1ubuntu310.3-3ubuntu210.4.1-3ubuntu1
10.4.1-3ubuntu1.1
frr
Ubuntu:26.04:LTS
 before 10.5.1-1ubuntu2, plus listed versions
10.4.1-3ubuntu110.4.1-3ubuntu210.5.1-1ubuntu1
10.5.1-1ubuntu2
frr
Ubuntu:22.04:LTS
From an advisory covering 9 CVEs
 before 8.1-1ubuntu1.14, plus listed versions
7.5.1-1.18.1-18.1-1ubuntu18.1-1ubuntu1.18.1-1ubuntu1.2
Show 10 moreShow less
8.1-1ubuntu1.38.1-1ubuntu1.48.1-1ubuntu1.58.1-1ubuntu1.68.1-1ubuntu1.78.1-1ubuntu1.88.1-1ubuntu1.98.1-1ubuntu1.108.1-1ubuntu1.118.1-1ubuntu1.13
8.1-1ubuntu1.14
frr
Ubuntu:24.04:LTS
From an advisory covering 9 CVEs
 before 8.4.4-1.1ubuntu6.5, plus listed versions
8.4.4-1.1ubuntu18.4.4-1.1ubuntu38.4.4-1.1ubuntu48.4.4-1.1ubuntu58.4.4-1.1ubuntu6
Show 4 moreShow less
8.4.4-1.1ubuntu6.18.4.4-1.1ubuntu6.28.4.4-1.1ubuntu6.38.4.4-1.1ubuntu6.4
8.4.4-1.1ubuntu6.5
frr
Ubuntu:25.10
From an advisory covering 9 CVEs
 before 10.4.1-3ubuntu1.1, plus listed versions
10.2.1-1ubuntu310.3-3ubuntu210.4.1-3ubuntu1
10.4.1-3ubuntu1.1

History

History
RecordedChangedSources
affectedNVD
affectedOSV
factsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-61102 is a high vulnerability (CVSS 7.5) in Frrouting, published October 27, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.50%, the 42nd percentile. Fixed in frr 8.5.5-5.

References

Show 38 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open